Maven/ch.qos.logback:logback-core CVE-2026-9828: low, EPSS 0.37%
QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability
Action: Upgrade ch.qos.logback:logback-core to 1.5.33 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.33 | - |
Fixed versions
| 1.5.33 |
Sources
- osv: GHSA-p47f-322f-whfh
- https://nvd.nist.gov/vuln/detail/CVE-2026-9828
- https://github.com/qos-ch/logback
- https://logback.qos.ch/news.html#1.5.33
CVE-2026-9828 · published · modified · JSON